rate-limiter-config

Rate Limiter Config - Auto-activating skill for Security Fundamentals. Triggers on: rate limiter config, rate limiter config Part of the Security Fundamentals skill category.

1.01x

Quality

Does it follow best practices?

Impact

98%

1.01x

Average score across 3 eval scenarios

Securityby

Passed

No known issues

Optimize this skill with Tessl

npx tessl skill review --optimize ./planned-skills/generated/03-security-fundamentals/rate-limiter-config/SKILL.md

Evaluation results

100%

Protect a Public REST API from Abuse

Express API rate limiter setup

Criteria

Without context

With context

Standard HTTP 429 response

100%

IP-based limiting

100%

Configurable limits

80%

100%

No hardcoded secrets

100%

Retry-After header

90%

100%

Established npm package

100%

Limit applied to routes

100%

Separate auth vs general limits

100%

Informative error message

100%

Documentation of config

100%

Without context: $0.4184 · 5m 3s · 27 turns · 27 in / 5,699 out tokens

With context: $0.5461 · 2m 24s · 33 turns · 325 in / 6,835 out tokens

95%

Harden Login and Password Reset Endpoints Against Automated Attacks

Auth endpoint brute force protection

Criteria

Without context

With context

Stricter login limits

100%

Forgot-password throttle

100%

Per-IP limiting on auth routes

100%

HTTP 429 on exceeded limit

100%

Named attack patterns documented

100%

OWASP or security standard referenced

100%

No hardcoded secrets

100%

Limit values configurable

25%

37%

Middleware applied to routes

100%

Meaningful error response

100%

Established package used

100%

Without context: $0.3507 · 1m 35s · 21 turns · 22 in / 5,176 out tokens

With context: $0.4472 · 1m 56s · 29 turns · 29 in / 5,250 out tokens

100%

Upgrade Rate Limiting for a Multi-Instance API Deployment

Distributed rate limiting configuration

Criteria

Without context

With context

Shared store backend

100%

Redis connection via env var

100%

Original limits preserved or improved

100%

HTTP 429 status maintained

100%

Local dev fallback documented

100%

Configurable limit values

100%

Attack mitigations named

100%

Limitations documented

100%

Established package used

100%

No hardcoded secrets

100%

Dependencies updated in package.json

100%

Without context: $0.4412 · 2m 5s · 24 turns · 25 in / 6,862 out tokens

With context: $0.6103 · 2m 37s · 34 turns · 67 in / 7,812 out tokens

Repository: jeremylongshore/claude-code-plugins-plus-skills
Commit: 994edc4

Evaluated: 18 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Protect a Public REST API from Abuse Harden Login and Password Reset Endpoints Against Automated Attacks Upgrade Rate Limiting for a Multi-Instance API Deployment

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.